CVE-2005-3275

Description (CNA)

The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.redhat.com/support/errata/RHSA-2006-0140.html
• http://secunia.com/advisories/18684
• http://secunia.com/advisories/18056
• http://secunia.com/advisories/18977
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142
• http://secunia.com/advisories/18059
• http://secunia.com/advisories/19185
• http://secunia.com/advisories/19607
• http://www.securityfocus.com/archive/1/419522/100/0/threaded
• http://www.securityfocus.com/archive/1/428058/100/0/threaded
• http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044
• http://www.debian.org/security/2005/dsa-922
• https://usn.ubuntu.com/219-1/
• http://www.redhat.com/support/errata/RHSA-2006-0190.html
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
• http://www.securityfocus.com/archive/1/428028/100/0/threaded
• http://www.debian.org/security/2005/dsa-921
• http://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA
• http://www.securityfocus.com/bid/15531
• http://secunia.com/advisories/17826
• http://secunia.com/advisories/17918
• http://www.securityfocus.com/archive/1/427980/100/0/threaded
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
• http://www.redhat.com/support/errata/RHSA-2006-0191.html
• http://secunia.com/advisories/18562

ADP enrichment